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1 . (previously presented) A communication system comprising: 

a plurality of multicast devices forming a shared multicast distribution tree; 
a host device; with a processor; 
a key server; and 

a designated device with a processor, separate from the key server, through which the 
host device requests access to the shared tree associated with a group, wherein: 

the host device obtains access information from the key server for the host device to 
enable the host device to request access to the shared tree associated with the group, the access 
information including authentication information unique to the host device/group pair, the 
authentication information including an access token comprising a host identifier, a token 
identifier and an authentication key for authenticating the host with the designated device; 

the designated device obtains the access information associated with the host 
device/group pair from the key server for enabling the host device to access the shared tree; 

the host device sends an access control message to the designated device to join the 
shared tree; and 

the designated device uses the access information to authenticate the host device before 
adding the host device to the shared tree, including using the token identifier to obtain a group 
identifier and authentication key from memory in order to verify authentication of the host 
device. 

2. (previously presented) The communication system of claim 1, wherein the key server includes 
logic for authenticating the host device and generating the access information for the host device 
to access the shared tree. 

3. (original) The communication system of claim 2, wherein the key server provides the access 
information to the host device over a secure communication channel. 

4. (original) The communication system of claim 2, wherein the key server provides the access 
information to the designated device using a unicast distribution mechanism. 

5. (original) The communication system of claim 2, wherein the key server provides the access 
information to the designated device using a multicast distribution mechanism. 
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6. (original) The communication system of claim 2, wherein the key server provides the access 
information to the designated device using a broadcast distribution mechanism. 

7. (original) The communication system of claim 2, wherein the designated device requests the 
access information from the key server upon receiving the access control message. 

8. (original) The communication system of claim 2, wherein the key server provides the access 
information to the plurality of multicast devices forming the shared tree. 

9. (cancelled) 

10. (previously presented) The communication system of claim 1, wherein the access control 
message comprises the token identifier. 

11. (original) The communication system of claim 10, wherein the access control message is an 
Internet Group Management Protocol (IGMP) join request including the token identifier. 

12. (original) The communication system of claim 1, wherein the designated device joins the 
shared tree on behalf of the host device upon authenticating the host device. 

13. (original) The communication system of claim 12, wherein the shared tree is a Protocol 
Independent Multicast (PIM) shared tree, and wherein the designated device sends a PIM join 
request upstream toward a rendezvous point device in order to join the shared tree on behalf of 
the host device upon authenticating the host device. 

14. (original) The communication system of claim 1, wherein the designated device forwards the 
access control message to a neighboring device upon failing to authenticate the host device using 
the access information. 

15. (original) The communication system of claim 14, wherein the neighboring device obtains 
the access information and authenticates the host device using the access information. 
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16. (currently amended) A method performed at a key server comprising: 

authenticating a host device for entry into a multicast group; 

generating access information by the key server for the host device to join the multicast 
group, the access information including authentication information unique to the host device/ 
multicast group pair, the authentication information including an access token comprising a host 
identifier, a token identifier and an authentication key for authenticating the host with the 
designated device; 

sending the access information to the host device; and 

sending the access information to a separate designated device through whic h the host 
device gains access to a shared multicast distribution tree, the token identifier being used by the 
designated device to obtain a group identifier and authentication key from memory in order to 
verify authentication of the host device. 

17. (cancelled) 

18. (previously presented) The method of claim 16, wherein the access information further 
comprises an expiration date for the access token. 

19. (original) The method of claim 16, wherein the access information further comprises a public 
key. 

20. (original) The method of claim 16, wherein sending the access information to the host device 
comprises: 

sending a communication message including the access information to the host device 
over a secure communication channel. 

21. (original) The- method of claim 20, wherein the communication message is a group key 
management communication message. 

22. (original) The method of claim 16, wherein sending the access information to the designated 
device for the host device comprises: 
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sending a communication message including the access information to the designated 
device over a secure communication channel. 

23. (original) The method of claim 22, wherein the communication message is a unicast 
communication message addressed to the designated device. 

24. (original) The method of claim 22, wherein the communication message is a multicast 
communication message addressed to a multicast group of which the designated device is a 
member. 

25. (original) The method of claim 22, wherein the communication message is a broadcast 
communication message. 

26. (cancelled) 

27. (previously presented) The method of claim 16, wherein the access token comprises: 
a group identifier for identifying a multicast group; 

a host identifier for identifying the host device; 
an expiration date for the access token; 

a server identifier for identifying a key server; and a public key for the key server. 

28. (previously presented) A method performed at a host device comprising: 

obtaining access information from a key server for joining a multicast group, the access 
information including authentication information unique to the host device/ group pair, the 
authentication information including an access token comprising a host identifier, a token 
identifier and an authentication key for authenticating the host with the designated device; 

generating an access control message for joining the multicast group using the access 
information; and 

sending the access control message to a designated device separate from the key server 
for enabling the host device to join the multicast group, the token identifier being used by the 
designated device to obtain a group identifier and authentication key from memory in order to 
verify authentication of the host device. 
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29. (cancelled) 

30. (cancelled) 

3 1 . (previously presented) The method of claim 28, further comprising: 

generating authentication information using the access information; and sending the 
authentication information to the designated device. 

32. (original) The method of claim 31, wherein generating the authentication information using 
the access information comprises generating a digital signature using the access information and 
a predetermined digital signature scheme. 

33. (original) The method of claim32, wherein the predetermined digital signature scheme 
comprises a keyed hash function. 

34. (previously presented) The method of claim 33, wherein the keyed hash function comprises 
IPsec AH with Keyed-Hashing for Message Authentication using Message Digest 5 (HMAC- 
MD5). 

35. (previously presented) The method of claim 33, wherein the keyed hash function comprises 
IP with Keyed-Hashing for Message Authentication using a Secure Hash Algorithm (HMAC- 
SHA-1). 

36. (previously presented) The method of claim 28, wherein the access information further 
comprises an expiration date for the access token. 

37. (original) The method of claim 36, wherein generating the access control message using the 
access information comprises: 

including the token identifier in the access control message. 
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38. (original) The method of claim 37, wherein the access control message is an Internet Group 
Management Protocol (IGMP) join request message including the token identifier. 

39. (original) The method of claim 28, further comprising: 

establishing a security agreement with the designated device using the access information. 

40. (previously presented) A method performed at a designated device that controls access to a 
shared multicast tree comprising: 

receiving an access control message from a host device; 

determining whether the host device is authorized to request access to a shared multicast 
distribution tree associated with a group based upon access information for the host device, the 
access information including authentication information unique to the host device/group pair and 
being received by the designated device from a separate key server, the authentication 
information including a host identifier, an access token comprising a token identifier and an 
authentication key for authenticating the host with the designated device, the token identifier 
being used by the designated device to obtain a group identifier and authentication key from 
memory in order to verify authentication of the host device; and 

joining the shared tree on behalf of the host device if the host device is determined to be 
authorized to request access to the shared tree. 

41. (original) The method of claim 40, further comprising: 

obtaining the access information for the host device. 

42. (original) The method of claim 41, wherein obtaining the access information for the host 
device comprises: 

receiving the access information from an access information server prior to receiving the 
access control message from the host device. 

43. (original) The method of claim 41, wherein obtaining the access information for the host 
device comprises: 

requesting the access information from an access information server after receiving the 
access control message from the host device. 
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44. (original) The method of claim 40, wherein determining whether the host device is 
authorized to access the shared tree comprises: 

maintaining an access information database; 
searching the access information database for the access information for the host device; 

failing to find the access information for the host device in the access information 
database; and 

determining that the host device is not authorized to access the shared tree. 

45. (original) The method of claim 40, wherein determining whether the host device is 
authorized to access the shared tree comprises: 

maintaining an access information database; 

searching the access information database for the access information for the host device; 
failing to find the access information for the host device in the access information 
database; and 

forwarding the access control message to a neighboring device. 

46. (cancelled) 

47. (original) The method of claim 40, wherein the access control message includes the token 
identifier. 

48. (previously presented) The method of claim 40, wherein the access information further 
comprises an expiration date for the access token. 

49. (previously presented) The method of claim 48, wherein determining whether the host device 
is authorized to access the shared tree comprises: 

determining that the access token has expired based upon the expiration date for the 
access token; and 

determining that the host device is not authorized to access the shared tree in response to 
expiration of the access token. 
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50. (previously presented) The method of claim 48, wherein determining whether the host device 
is authorized to access the shared tree comprises: 

determining that the access token has expired based upon the expiration date for the 
access token; and 

forwarding the access control message to a neighboring device. 

5 1 . (original) The method of claim 40, wherein determining whether the host device is 
authorized to access the shared tree comprises: 

authenticating the host device using the access information and a predetermined 
authentication scheme; and 

determining whether the host device is authorized to access the shared tree based upon 
authenticating the host device using the access information and the predetermined authentication 
scheme. 

52. (original) The method of claim 51, wherein authenticating the host device using the access 
information and the predetermined authentication scheme comprises: 

receiving authentication information from the host device; and authenticating the host 
device based upon the access information and the authentication information received from the 
host device. 

53. (original) The method of claim 52, wherein the authentication information comprises a 
digital signature, and wherein authenticating the host device based upon the access information 
and the authentication information received from the host device comprises: 

verifying the digital signature using the access information and a predetermined digital 
signature scheme. 

54. (original) The method of claim 53, wherein the predetermined digital signature scheme 
comprises a keyed hash function. 

55. (previously presented) The method of claim 54, wherein the keyed hash function comprises 
IPsec AH with Keyed-Hashing for Message Authentication using Message Digest 5 (HMAC- 
MD5). 
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56. (previously presented) The method of claim 54, wherein the keyed hash function comprises 
IPsec AH with Keyed-Hashing for Message Authentication using a Secure Hash Algorithm 
(HMAC-SHA-1). 

57. (original) The method of claim 51, wherein determining whether the host device is 
authorized to access the shared tree based upon authenticating the host device using the access 
information and the predetermined authentication scheme comprises: 

determining that authentication failed; 

determining that the host device is not authorized to access the shared tree. 

58. (original) The method of claim 57, further comprising: 

forwarding the access control message to a neighboring device. 

59. (original) The method of claim 51, wherein determining whether the host device is 
authorized to access the shared tree based upon authenticating the host device using the access 
information and the predetermined authentication scheme comprises: 

determining that authentication succeeded; and 

determining that the host device is authorized to access the shared tree. 

60. (original) The method of claim 40, further comprising: 

establishing a security association with the host device using the access information upon 
determining that the host device is authorized to access the shared tree. 

61. (previously presented) An apparatus comprising: 

authenticating logic operably coupled to authenticate a host device for entry into a 
multicast group; 

access logic, implemented by a processor, operably coupled to generate access 
information for the host device, the access information including authentication information 
unique to the host device/multicast group pair, the authentication information including an access 
token comprising a host identifier, a token identifier and an authentication key for authenticating 
the host with the designated device; and 
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distribution logic operably coupled to distribute the access information both to the host 
device and to a separate designated device for enabling the host device to access a shared 
multicast distribution tree through the designated device, the token identifier being used by the 
designated device to obtain a group identifier and authentication key from memory in order to 
verify authentication of the host device. 

62. (cancelled) 

63. (previously presented) The apparatus of claim 61 wherein the access token comprises: 
a group identifier for identifying a multicast group; 

an expiration date for the access token; 

a server identifier for identifying a key server; and a public key for a key server. 

64. (original) The apparatus of claim 61, wherein the distribution logic comprises: 

group key management logic operably coupled to send the access information to the host 

device. 

65. (original) The apparatus of claim 61, wherein the distribution logic comprises: 
unicasting logic operably coupled to send the access information to the designated device using a 
unicast mechanism. 

66. (original) The apparatus of claim 61, wherein the distribution logic comprises: 
multicasting logic operably coupled to send the access information to the designated device 
using a multicast mechanism. 

67. (original) The apparatus of claim 61, wherein the distribution logic comprises: 
broadcasting logic operably coupled to send the access information to the designated device 
using a broadcast mechanism. 

68. (currently amended) A computer program stored on a non-transitory computer-readable 
storage medium for controlling a key server in a computer system, the computer program 
comprising: 
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authenticating logic programmed to authenticate a host device for entry into a multicast 

group; 

access logic programmed to generate access information for the host device,! the access 
information including authentication information unique of the host device/multicast group pair , 
the authentication information including an access token comprising a host identifier, a token 
identifier and an authentication key for authenticating the host with the designated device; and 

distribution logic programmed to distribute the access information to the host device and 
to a separate designated device for enabling the host device to access a shared multicast 
distribution tree through the designated device, the token identifier being used by the designated 
device to obtain a group identifier and authentication key from memory in order to verify 
authentication of the host device. 

69. (cancelled) 

70. (previously presented) The computer program of claim 68 wherein the access token 
comprises: 

a group identifier for identifying a multicast group; 
an expiration date for the access token; 

a server identifier for identifying a key server; and a public key for a key server. 

71. (original) The computer program of claim 68, wherein the distribution logic comprises: 

group key management logic programmed to send the access information to the host 

device: 

72. (original) The computer program of claim 68, wherein the distribution logic comprises: 

unicasting logic programmed to send the access information to the designated device 
using a unicast mechanism. 

73. (original) The computer program of claim 68, wherein the distribution logic comprises: 

multicasting logic programmed to send the access information to the designated device 
using a multicast mechanism. 
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74. (original) The computer program of claim 68, wherein the distribution logic comprises: 

broadcasting logic programmed to send the access information to the designated device 
using a broadcast mechanism. 

75. (currently amended) An apparatus comprising: 

receiving logic operably coupled to receive, from an access information server, access 
information, the access information enabling the host device to join a multicast group the access 
information being unique to the host device/multicast group pair A the authentication information 
including an access token comprising a host identifier, a token identifier and an authentication 
key for authenticating the host with the designated device; and 

access logic, implemented by a processor, operably coupled to generate an access control 
message for joining the multicast group using the access information and to send the access 
control message to a designated device separate from the access information server and coupling 
the host device to the multicast group, the token identifier being used by the designated device to 
obtain a group identifier and authentication key from memory in order to verify authentication of 
the host device. 

76. (cancelled) 

77. (previously presented) The apparatus of claim 75, wherein the access logic is operably 
coupled to include the token identifier in the access control message. 

78. (original) The apparatus of claim 75, wherein the access logic is operably coupled to generate 
authentication information using the access information and send the authentication information 
to the designated device. 

79. (original) The apparatus of claim 78, wherein the access logic is operably coupled to generate 
the authentication information by generating a digital signature using the access information and 
a predetermined digital signature scheme. 

80. (original) The apparatus of claim 79, wherein the predetermined digital signature scheme 
comprises a keyed hash function. 
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81. (previously presented)The apparatus of claim 80, wherein the keyed hash function comprises 
IPsec AH with Keyed-Hashing for Message Authentication using Message Digest 5 (HMAC- 
MD5). 

82. (previously presented) The apparatus of claim 80, wherein the keyed hash function comprises 
IPsec AH with Keyed-Hashing for Message Authentication using a Secure Hash Algorithm 
(HMAC-SHA-1). 

83. (previously presented) The apparatus of claim 75, wherein the access information further 
comprises an expiration date for the access token. 

84. (previously presented) The apparatus of claim 75, wherein the access logic is operably 
coupled to include the token identifier in the access control message. 

85. (original) The apparatus of claim 84, wherein the access control message is an Internet Group 
Management Protocol (IGMP) join request message including the token identifier. 

86. (original) The apparatus of claim 75, wherein the access logic is operably coupled to 
establish a security agreement with the designated device using the access information. 

87. (previously presented) A computer program stored on a non-transitory computer-readable 
storage medium for controlling a computer system, the computer program comprising: 

receiving logic programmed to receive access information for joining a multicast group 
from an access information server, the access information including authentication information 
unique to a host device/multicast group pair, the authentication information including an access 
token comprising a host identifier, a token identifier and an authentication key for authenticating 
the host with the designated device; and 

access logic programmed to generate an access control message for joining the multicast 
group using the access information and to send the access control message to a designated device 
separate from the access information server and coupling the host device to the multicast group, 
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the token identifier being used by the designated device to obtain a group identifier and 
authentication key from memory in order to verify authentication of the host device. 

88. (cancelled) 

89. (previously presented) The computer program of claim 87, wherein the access logic is 
programmed to include the token identifier in the access control message. 

90. (original) The computer program of claim 87, wherein the access logic is programmed to 
generate authentication information using the access information and send the authentication 
information to the designated device. 

91 . (original) The computer program of claim 90, wherein the access logic is programmed to 
generate the authentication information by generating a digital signature using the access 
information and a predetermined digital signature scheme. 

92. (original) The computer program of claim 91, wherein the predetermined digital signature 
scheme comprises a keyed hash function. 

93. (previously presented) The computer program of claim 92, wherein the keyed hash function 
comprises IPsec with Keyed-Hashing for Message Authentication using Message Digest 5 
(HMAC-MD5). 

94. (previously presented)The computer program of claim 92, wherein the keyed hash function 
comprises IPsec AH with Keyed-Hashing for Message Authentication using a Secure Hash 
Algorithm (HMAC-SHA-1). 

95. (previously presented) The computer program of claim 87, wherein the access information 
further comprises an expiration date for the access token. 

96. (previously presented) The computer program of claim 87, wherein the access logic is 
programmed to include the token identifier in the access control message. 
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97. (original) The computer program of claim 96, wherein the access control message is an 
Internet Group Management Protocol (IGMP) join request message including the token 
identifier. 

98. (original) The computer program of claim 87, wherein the access logic is programmed to 
establish a security agreement with the designated device using the access information. 

99. (previously presented) An apparatus comprising: 

receiving logic operably coupled to receive an access control message from a host device, 
the access control message for permitting the host device to gain access to a multicast group, the 
access control message including authentication information unique to the host device/multicast 
group pair, the authentication information including an access token comprising a host identifier, 
a token identifier and an authentication key for authenticating the host with the designated 
device; 

access logic implemented by a processor operably coupled to determine whether the host 
device is authorized to access a shared multicast distribution tree based upon access information 
for the host device stored at the apparatus, the stored access information including authentication 
information unique to the host device/multicast group pair and being received from a separate 
key server, the token identifier being used by the designated device to obtain a group identifier 
and authentication key from memory in order to verify authentication of the host device; and 

joining logic implemented by a processor operably coupled to join the shared tree on 
behalf of the host device if the access logic determines that the host device is authorized to 
access the shared tree. 

100. (original) The apparatus of claim 99, wherein the access logic is operably coupled to obtain 
the access information for the host device from an access information server. 

101. (original) The apparatus of claim 100, wherein the access logic is operably coupled to 
obtain the access information for the host device from the access information server prior to 
receiving the access control message from the host device. 
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102. (original) The apparatus of claim 100, wherein the access logic is operably coupled to 
obtain the access information for the host device from the access information server after 
receiving the access control message from the host device. 

103. (original) The apparatus of claim 99, further comprising an access information database. 

104. (original) The apparatus of claim 103, wherein the access logic is operably coupled to 
search the access information database for the access information for the host device and 
determine that the host device is not authorized to access the shared tree upon failing to find the 
access information for the host device in the access information database. 

105. (original) The apparatus of claim 103, wherein the access logic is operably coupled to 
search the access information database for the access information for the host device and forward 
the access control message to a neighboring device upon failing to find the access information 
for the host device in the access information database. 

106. (cancelled) 

107. (cancelled) 

108. (previously presented) The apparatus of claim 99, wherein the access information further 
comprises an expiration date for the access token. 

109. (previously presented) The apparatus of claim 108, wherein the access logic is operably 
coupled to determine whether the host device is authorized to access the shared tree based upon 
the expiration date of the access token. 

110. (previously presented) The apparatus of claim 109, wherein the access logic is operably 
coupled to determine that the host device is not authorized to access the shared tree upon 
determining that the access token has expired. 
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111. (previously presented) The apparatus of claim 109, wherein the access logic is operably 
coupled to forward the access control message to a neighboring device upon determining that the 
access token has expired based upon the expiration date for the access token. 

1 12. (original) The apparatus of claim 99, wherein the access logic is operably coupled to 
authenticate the host device using the access information and a predetermined authentication 
scheme. 

113. (original) The apparatus of claim 112, wherein the access logic is operably coupled to 
receive authentication information from the host device and authenticate the host device based 
upon the access information and the authentication information received from the host device. 

114. (original) The apparatus of claim 113, wherein the authentication information comprises a 
digital signature, and wherein the access logic is operably coupled to verify the digital signature 
using the access information and a predetermined digital signature scheme. 

115. (original) The apparatus of claim 114, wherein the predetermined digital signature scheme 
comprises a keyed hash function. 

116. (previously presented) The apparatus of claim 115, wherein the keyed hash function 
comprises IPsec AH with Keyed-Hashing for Message Authentication using Message Digest 5 
(HMAC-MD5). 

117. (previously presented) The apparatus of claim 115, wherein the keyed hash function 
comprises IPsec AH with Keyed-Hashing for Message Authentication using a Secure Hash 
Algorithm (HMAC-SHA-1). 

118. (original) The apparatus of claim 112, wherein the access logic is operably coupled to 
determine that the host device is not authorized to access the shared tree upon determining that 
the authentication failed. 
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119. (original) The apparatus of claim 118, wherein the access logic is operably coupled to 
forward the access control message to a neighboring device upon determining that the 
authentication failed. 

120. (original) The apparatus of claim 1 12, wherein the access logic is operably coupled to 
determine that the host device is authorized to access the shared tree upon determining that the 
authentication succeeded. 

121. (original) The apparatus of claim 99, wherein the access information is operably coupled to 
e(original) upon determining that the host device is authorized to access the shared tree. 

122. (currently amended) A computer program stored on a non-transitory computer-readable 
storage medium for controlling a computer system, the computer program comprising: 

receiving logic programmed to receive an access control message from a host device to 
enable the host device to join a multicast group, the access control information message 
including authentication information unique to the host device/multicast group pair, the 
authentication information including an access token comprising a host identifier, a token 
identifier and an authentication key for authenticating the host with the designated device; 

access logic programmed to determine whether the host device is authorized to access a 
shared multicast distribution tree based upon stored access information for the host device, the 
stored access information including authentication information unique to the host 
device/multicast group pair and being received from a separate key server, the token identifier 
being used by the designated device to obtain a group identifier and authentication key from 
memory in order to verify authentication of the host device; and 

joining logic programmed to join the shared tree on behalf of the host device if the access 
logic determines that the host device is authorized to access the shared tree. 

123. (original) The computer program of claim 122, wherein the access logic is programmed to 
obtain the access information for the host device from an access information server. 
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124. (original) The computer program of claim 123, wherein the access logic is programmed to 
obtain the access information for the host device from the access information server prior to 
receiving the access control message from the host device. 

125. (original) The computer program of claim 123, wherein the access logic is programmed to 
obtain the access information for the host device from the access information server after 
receiving the access control message from the host device. 

126. (currently amended) The vcomputer program of claim 122, further comprising an access 
information database. 

127. (original) The computer program of claim 126, wherein the access logic is programmed to 
search the access information database for the access information for the host device and 
determine that the host device is not authorized to access the shared tree upon failing to find the 
access information for the host device in the access information database. 

128. (original) The computer program of claim 126, wherein the access logic is programmed to 
search the access information database for the access information for the host device and forward 
the access control message to a neighboring device upon failing to find the access information 
for the host device in the access information database. 

129. (cancelled) 

130. (cancelled) 

131. (previously presented) The computer program of claim 122, wherein the access information 
further comprises an expiration date for the access token. 

132. (previously presented) The computer program of claim 131, wherein the access logic is 
programmed to determine whether the host device is authorized to access the shared tree based 
upon the expiration date for the access token. 
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133. (previously presented) The computer program of claim 132, wherein the access logic is 
programmed to determine that the host device is not authorized to access the shared tree upon 
determining that the access token has expired. 

134. (previously presented) The computer program of claim 132, wherein the access logic is 
programmed to forward the access control message to a neighboring device upon determining 
that the access token has expired. 

135. (original) The computer program of claim 122, wherein the access logic is programmed to 
authenticate the host device using the access information and a predetermined authentication 
scheme. 

136. (original) The computer program of claim 135, wherein the access logic is programmed to 
receive authentication information from the host device and authenticate the host device based 
upon the access information and the authentication information received from the host device. 

137. (original) The computer program of claim 136, wherein the authentication information 
comprises a digital signature, and wherein the access logic is programmed to verify the digital 
signature using the access information and a predetermined digital signature scheme. 

138. (original) The computer program of claim 137, wherein the predetermined digital signature 
scheme comprises a keyed hash function. 

139. (previously presented) The computer program of claim 138, wherein the keyed hash 
function comprises IPsec AH with Keyed-Hashing for Message Authentication using Message 
Digest 5 (HMAC-MD5). 

140. (previously presented) The computer program of claim 138, wherein the keyed hash 
function comprises IPsec AH with Keyed-Hashing for Message Authentication using a Secure 
Hash Algorithm (HMAC-SHA-1). 
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141. (original) The computer program of claim 135, wherein the access logic is programmed to 
determine that the host device is not authorized to access the shared tree upon determining that 
the authentication failed. 

142. (original) The computer program of claim 141, wherein the access logic is programmed to 
forward the access control message to a neighboring device upon determining that the 
authentication failed. 

143. (original) The computer program of claim 135, wherein the access logic is programmed to 
determine that the host device is authorized to access the shared tree upon determining that the 
authentication succeeded. 

144. (original) The computer program of claim 122, wherein the access information is 
programmed to establish a security association with the host device using the access information 
upon determining that the host device is authorized to access the shared tree. 

145. (cancelled) 

146. (cancelled) 

147. (cancelled) 

148. (cancelled) 

149. (cancelled) 

150. (cancelled) 

151. (cancelled) 


152. (cancelled) 


